pypi
5,093 tracked vulnerabilities.
CVE-2018-12291
HIGH
Matrix Synapse <0.31.1 - Info Disclosure
Jun 13, 2018
CVSS 7.5
EPSS 0.02
CVE-2018-10657
HIGH
Matrix Synapse < 0.28.1 - Denial of Service via Malicious Event Depth Injection
May 02, 2018
CVSS 7.5
EPSS 0.02
CVE-2018-1000167
HIGH
OISF suricata-update <1.0.0a1 - Insecure Deserialization
Apr 18, 2018
CVSS 7.8
EPSS 0.04
CVE-2018-1000164
HIGH
gunicorn < 19.5.0 - HTTP Header Injection via CRLF in process_headers
Apr 18, 2018
CVSS 7.5
EPSS 0.02
CVE-2018-1000159
MEDIUM
tlslite-ng <0.7.3 - Improper Validation of Integrity Check Value
Apr 18, 2018
CVSS 5.9
EPSS 0.01
CVE-2018-0023
MEDIUM
JSNAPy < 1.3.0 - Incorrect Default Permissions
Apr 11, 2018
CVSS 5.5
EPSS 0.00
CVE-2018-9856
HIGH
Kotti < 1.3.2 and 2.x < 2.0.0b2 - Cross-Site Request Forgery via Local Roles Implementation
Apr 09, 2018
CVSS 8.8
EPSS 0.01
CVE-2018-1002150
CRITICAL
Koji <1.12.1-1.15.1 - Privilege Escalation
Apr 04, 2018
CVSS 9.1
EPSS 0.02
CVE-2018-9160
CRITICAL
SickRage < 2018.03.09-1 - Unprotected Credential Exposure via HTTP Response
Mar 31, 2018
CVSS 9.8
EPSS 0.77
CVE-2018-8768
HIGH
Jupyter Notebook < 5.4.1 - Stored Cross-Site Scripting via Malicious Notebook File
Mar 18, 2018
CVSS 7.8
EPSS 0.01
CVE-2018-1000132
CRITICAL
Mercurial < 4.5.1 - Unauthorized Data Access via Protocol Server
Mar 14, 2018
CVSS 9.1
EPSS 0.03
CVE-2018-8097
CRITICAL
Eve < 0.7.5 - Remote Code Execution via MongoDB Where Parameter
Mar 14, 2018
CVSS 9.8
EPSS 0.06
CVE-2018-7750
CRITICAL
Paramiko <2.4.1 - RCE
Mar 13, 2018
CVSS 9.8
EPSS 0.27
CVE-2018-1000089
HIGH
Anymail django-anymail <1.3 - Info Disclosure
Mar 13, 2018
CVSS 7.4
EPSS 0.01
CVE-2018-7749
CRITICAL
AsyncSSH < 1.12.1 - Unauthenticated Authentication Bypass
Mar 12, 2018
CVSS 9.8
EPSS 0.02
CVE-2018-7537
MEDIUM
Django <2.0.3, 1.11.<11, 1.8.<19 - Catastrophic Backtracking
Mar 09, 2018
CVSS 5.3
EPSS 0.04
CVE-2018-7536
MEDIUM
Django <2.0.3, <1.11.11, <1.8.19 - Info Disclosure
Mar 09, 2018
CVSS 5.3
EPSS 0.05
CVE-2018-7753
CRITICAL
Bleach 2.1.0-2.1.2 - Improper Input Validation via Character Entity Bypass
Mar 07, 2018
CVSS 9.8
EPSS 0.02
CVE-2018-7490
HIGH
NUCLEI
uWSGI < 2.0.17 - Path Traversal via --php-docroot Option
Feb 26, 2018
CVSS 7.5
EPSS 0.70
CVE-2018-7206
HIGH
JupyterHub OAuthenticator <0.6.2, <0.7.3 - Privilege Escalation
Feb 18, 2018
CVSS 8.8
EPSS 0.02
CVE-2018-6188
HIGH
Django <2.0.2, 1.11.8-1.11.9 - Info Disclosure
Feb 05, 2018
CVSS 7.5
EPSS 0.05
CVE-2018-6596
CRITICAL
django-anymail < 1.2.1 - Timing Attack on WEBHOOK_AUTHORIZATION Secret
Feb 03, 2018
CVSS 9.1
EPSS 0.03
CVE-2018-6594
HIGH
PyCrypto < 2.6.1 - Inadequate Encryption Strength in ElGamal Key Generation
Feb 03, 2018
CVSS 7.5
EPSS 0.02
CVE-2018-5773
MEDIUM
python-markdown2 < 2.3.5 - Cross-Site Scripting via Safe Mode Bypass
Jan 18, 2018
CVSS 6.1
EPSS 0.01
CVE-2018-5269
MEDIUM
OpenCV 3.3.1 - Reachable Assertion in cv::RBaseStream::setPos
Jan 08, 2018
CVSS 5.5
EPSS 0.01
Products
tensorflow 427
tensorflow-gpu 421
tensorflow-cpu 417
Django 147
apache-airflow 128
open-webui 101
Plone 96
mlflow 77
apache-superset 67
salt 67
ansible 66
pillow 60
vllm 52
nova 49
gradio 48
matrix-synapse 44
pyload-ng 44
rdiffweb 43
keystone 40
vyper 39
moin 35
aiohttp 34
opencv-contrib-python 30
opencv-python 30
langflow 28
pypdf 28
PraisonAI 27
litellm 27
pgadmin4 26
openbabel 24
Quick Filters